ClawHub

OpenClawCash

v1.9.9

Deprecated legacy skill entry. Use the current OpenClawCash skill instead.

⭐ 0· 518·0 current·0 all-time
by@macd2
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
ℹ
Purpose & Capability
The skill declares itself deprecated and directs users to a replacement; that purpose is consistent with the SKILL.md content. However, the registry metadata (no required env/binaries) conflicts with the SKILL.md front-matter that lists AGENTWALLETAPI_KEY and curl as required. This mismatch is unexpected for a deprecated/redirecting entry.
✓
Instruction Scope
The runtime instructions simply mark the skill as deprecated and instruct the agent/user to install and use the replacement; they do not instruct reading files, contacting endpoints, or performing actions beyond telling the user to stop using this copy.
✓
Install Mechanism
No install spec and no code files (instruction-only) — lowest-risk form. There is no download or extract behavior described.
!
Credentials
The SKILL.md lists a required_env_var (AGENTWALLETAPI_KEY) and required_binaries (curl) even though the registry metadata shows none and the instructions do not use them. A declared credential requirement that isn't used is an incoherence and could confuse users into supplying sensitive keys unnecessarily.
✓
Persistence & Privilege
Skill is not always-enabled and does not request special persistence or system-level configuration. Defaults allow autonomous invocation, but there is no evidence this skill abuses that privilege.
What to consider before installing
This entry is deprecated and tells you not to use it — prefer the replacement OpenClawCash skill. Do not provide any API keys or secrets to this legacy entry. Before installing anything: (1) use the replacement link in the SKILL.md, (2) verify registry metadata matches the SKILL.md (the mismatch here is why this is flagged), and (3) never paste credentials into a skill that only redirects you elsewhere. If you must keep this record, treat it as informational only; do not set environment variables or grant secrets to it. If you need certainty, contact the skill owner or repository to confirm why the SKILL.md lists AGENTWALLETAPI_KEY and curl while the registry shows no requirements.

Like a lobster shell, security has layers — review code before you run it.

latestvk971cmj6h5qfkd7bhp19sex3a1821vn0

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments